All right, welcome back, everyone.
This is a situation this is about, frankly, frequently used queries on Shorten.
Right before we get into the real platform, you really have to understand what are the mostly used
queries that we can we can try to drive started.
OK, so some of them you can make use of this.
This is basically these are all strengths.
So you need commas for this and inverted commas.
And for this, you you can start with default passwords.
Now, see, this is something which mostly not work, because now people, because of shodan organizations
have they have got a bit more of their about that.
Yes.
There they are accessible from outside of the world.
Now there is a platform which can be used to get ourselves exposed.
Right.
In terms of our devices which are publicly facing devices, they can get exposed and exploited as well
if they are not UP-TO-DATE or if they have any vulnerability.
So that's why the organizations have got very much active and proactive in terms of, you know, removing
those vulnerabilities of weakness in the system.
So most of the time you will find the default password might have changed when it comes to the organization,
because organizations have certain, you know, best practices for all of their devices.
Now, it is it has been assigned as a governance, risk management and compliance audits as well.
So that's where we might find a lot.
But yes, this is something which people make use of at the moment.
You go on the device, you've tried to see what other default password is available, what are the default
password?
Basically the time you get the device maybe of any make maybe of any windows in your view, maybe Cisco
and Juniper dealing, Netgear, Meraki, any any sort of devices like these all comes with the default
password.
This could be admin had been through any other devices, Cisco, Cisco, all the stuff.
Right.
So these are called default password.
It is recommended to change the default password from the front from the time you have unpacked the
device.
Right.
So but usually as a home, users or normal users don't do that.
But organizations started doing this.
But still there are you know, there are millions of billions of devices basically connected to the
Internet.
There can be some devices which might not have been fixed.
So attackers just find some way to get into it.
And if those are exposed to the Internet, it sort of makes their job easier to see Shodan making job
easier, especially for the enterprises.
But, yes, it can.
You know, bad guys also can make use of it for some malicious activity, too.
So it is always better to keep yourself updated from the war about how your how your organization really
looks like from the external side.
All right.
Some of the other.
Yeah, as I said, admin had been password.
You can search for admin password as well.
So these are courageous, right?
Username and the password.
You can see if these are there in their manners, you will get their output as well.
Right.
And then you can also make use of this, which is Esquires last modified.
This is the banner for this Scott iOS devices, which is Esquires runs on all most of their Sasko devices
now.
So Rovner's home, you know, home routers, non-trading home repair branch office robusto this runs
on Cisco's devices.
It could be it could be at twenty eight, thirty thirty eight hundred devices or maybe twenty nine sixty.
Those legacy devices or maybe the latest devices as well.
They run Cisco Ayas as well.
You can last modified is something which is the version of the moment we try to log into their devices.
This is something which is mentioned about when was the last time it was modified.
If it is there, we might get the initial information as to a stupid request.
We might get the information from that as well about what all information we have about the website,
about the it's not the website which always has has got the Secret Service.
It can be any device which can which can be opened for SCDP request and which can allow anybody to use
the anybody to access the device to the Web browser.
Right.
So that's where the SCDP service might be running.
And we can possibly see of the city beheaders about what what is their device information?
What is the version of device that is the Apache wants to be watching and all those stuff.
Right.
So that does become that becomes very helpful there.
Right.
So we will be making use of these keywords and some new one as well, although these have become a bit
older, but will be making use of some old and some combination of it to make use of queries even more
effective.
Now there is a catch, even though even though with the time changes, right.
There is always there is a way to keep yourself updated with the queries which shortened.
There is a there is an option of shared queries.
So the way people make use of searches that can be shared across many of the many of the other folks
as well.
And I'll show you how to which you can make use of some real effective queries which are up to date
so that you can find the real one, reliable devices.
All right.
I'll show you that.
Thank you.